Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
File: Cani7ovOptW5GcSjPSbZu_mCqEM.mft (raw, json)
Hash identifier: ArDjCsfpnaWhtbLphzK8H0LIJmfWrGompfRUPHPqzBM=
Subject key identifier: 44:C1:7A:4C:3D:1C:8E:86:63:94:2C:A5:1A:9F:99:CC:29:01:0B:8C
Authority key identifier: 09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
Certificate issuer: /CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Certificate serial: 0198737430E6BF1C311B52E7EB54EACD830F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
Manifest number: 0A95
Signing time: Mon 04 Aug 2025 05:00:51 +0000
Manifest this update: Mon 04 Aug 2025 05:00:51 +0000
Manifest next update: Tue 05 Aug 2025 05:00:51 +0000
Files and hashes: 1: Cani7ovOptW5GcSjPSbZu_mCqEM.crl (hash: LEzZUSRtvqcRqoafWeehmfjRTeQ/vUxvJCuHBena1S0=)
2: VNahP0UQveZ8aD0TsmaExJY0tZA.roa (hash: mRQeMIIWNprrsGatyNnULZeqD9q6svl4Pj1uiYVKUX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:30:e6:bf:1c:31:1b:52:e7:eb:54:ea:cd:83:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Validity
Not Before: Aug 4 05:00:51 2025 GMT
Not After : Aug 5 05:00:51 2025 GMT
Subject: CN=44c17a4c3d1c8e8663942ca51a9f99cc29010b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:d6:da:d1:2a:72:32:1c:df:50:69:74:aa:
76:cd:90:71:bb:f4:bd:64:a3:05:87:bf:bd:2e:7c:
53:07:53:14:73:8d:bc:9b:69:cd:24:8f:da:ab:ec:
19:1e:81:83:c1:3a:bd:ae:5f:db:6b:b4:97:51:bd:
72:fe:52:74:20:05:f7:ef:61:5c:bf:98:cb:cb:f7:
22:15:09:dd:54:9a:01:c8:f6:7f:e5:f1:ce:76:10:
f1:79:89:e9:48:fd:42:85:1e:6d:05:99:2b:95:a7:
46:7e:dd:54:a0:b0:82:e7:d1:4e:b0:37:89:13:7e:
9e:d5:88:a0:35:a6:7e:4e:62:87:af:e9:2e:be:30:
cf:b3:e2:e5:f1:4d:a7:66:f7:bd:7a:97:93:e1:2c:
50:04:a3:b6:cb:a4:9e:05:91:09:e4:47:df:48:21:
cc:ec:56:40:c4:38:23:9d:78:6c:15:1e:4b:e0:16:
ea:5b:d5:5a:38:d0:86:ec:da:ba:91:8f:98:ea:23:
5f:4b:bf:3f:cd:36:92:3c:e3:c1:dc:05:3c:21:3c:
b2:18:f5:20:50:d3:f5:1d:f1:1b:2c:e9:ce:52:79:
48:1b:42:bf:46:1a:26:e7:b5:88:00:9e:67:e3:65:
9b:ff:29:39:b2:9b:11:83:6c:32:cf:04:8d:7b:e6:
4b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C1:7A:4C:3D:1C:8E:86:63:94:2C:A5:1A:9F:99:CC:29:01:0B:8C
X509v3 Authority Key Identifier:
keyid:09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:7c:75:ff:53:bd:d0:3f:04:f8:2d:79:74:a5:95:97:6f:9b:
91:05:6f:09:9b:90:72:5d:dc:71:2b:72:aa:27:83:86:3a:6c:
0b:27:ed:5b:9c:24:32:8f:f8:5f:4c:a3:bb:f7:c6:e6:d6:88:
64:34:ca:1a:08:ab:85:4b:4d:d8:17:2f:b3:eb:60:5b:48:22:
0c:2f:dc:92:bb:98:3b:10:42:32:58:8b:fc:4e:02:11:98:50:
05:11:eb:df:d1:3b:54:1c:ed:41:82:dd:0e:da:80:6a:42:67:
e6:a5:56:ab:78:4b:91:96:b4:39:6e:9d:e9:b5:cd:d8:0d:b4:
d8:45:a0:bb:33:fc:09:b5:b1:a4:99:aa:78:c8:16:5e:50:53:
0a:9f:d8:6f:af:28:cd:00:b4:dc:88:a8:a0:e5:bc:3c:d2:ec:
bf:69:a9:0d:5f:64:b6:41:95:1f:3f:b9:10:a7:28:9a:d3:9d:
6e:8e:b8:d7:17:ec:5f:95:0f:52:7f:21:a7:e1:97:36:7f:45:
cc:19:f2:a5:ac:fd:b3:8b:88:e3:10:e1:97:99:6e:63:48:02:
56:a0:e9:f0:86:05:34:dc:7a:7e:6b:56:3c:7a:41:06:37:c1:
23:ad:e0:98:83:5e:9b:00:7f:54:7d:1c:9f:cd:a7:df:80:04:
4d:f9:67:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:33 2025 by rpki-client